Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: unblock X-Debbugs-Cc: pkg-nvidia-de...@lists.alioth.debian.org
Please unblock package nvidia-graphics-drivers The new upstream LTS version 460.73.01 fixes two CVEs and a crash in X.org, both of which affect Bullseye. It also adds support for a few new cards. X.org crash under certain conditions, and a security vulnerability (CVE-2021-1076, CVE-2021-1077 and #987216) has been found in the kernel driver: https://nvidia.custhelp.com/app/answers/detail/a_id/5172 The inlined debdiff excludes the binary blobs. unblock nvidia-graphics-drivers/460.73.01-1 -- Kind regards, Luca Boccassi diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/changelog nvidia-graphics-drivers-460.73.01/debian/changelog --- nvidia-graphics-drivers-460.67/debian/changelog 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/changelog 2021-04-23 07:59:01.000000000 +0100 @@ -1,3 +1,17 @@ +nvidia-graphics-drivers (460.73.01-1) unstable; urgency=medium + + * New upstream production branch release 460.73.01 (2021-04-14). + * Fixed CVE-2021-1076, CVE-2021-1077. (Closes: #987216) + https://nvidia.custhelp.com/app/answers/detail/a_id/5172 + - Added support for the following GPUs: A10, A10G, A30, PG506-232, + RTX A4000, RTX A5000, T400, T600. + + [ Andreas Beckmann ] + * Update nv-readme.ids. + * Restrict watch file to releases from the 460.xx production branch. + + -- Andreas Beckmann <a...@debian.org> Fri, 23 Apr 2021 08:59:01 +0200 + nvidia-graphics-drivers (460.67-1) unstable; urgency=medium * New upstream production branch release 460.67 (2021-03-18). @@ -5,16 +19,6 @@ result in application instability if the GPUs did not match. - Fixed an issue that prevented G-SYNC from working properly after a mode switch on Kepler-based GPUs. - * New upstream release 450 series. - - Fixed a driver installation failure on Linux kernel 5.11 release - candidates, where the NVIDIA kernel module failed to build with error - "error: implicit declaration of function 'sys_close'". - * New upstream release 390 series. - - Fixed a bug where vkCreateSwapchain could cause the X Server to crash when - an invalid imageFormat was provided. - - Fixed a driver installation failure on Linux kernel 5.11 release - candidates, where the NVIDIA kernel module failed to build with error - "fatal error: asm/kmap_types.h: No such file or directory". [ Luca Boccassi ] * Update nv-readme.ids. @@ -31,15 +35,9 @@ nvidia-graphics-drivers (460.56-1) unstable; urgency=medium * New upstream production branch release 460.56 (2021-02-25). - - Added support for the following GPUs: GeForce RTX 3060, CMP 40HX + - Added support for the following GPUs: GeForce RTX 3060, CMP 40HX, CMP 30HX. - Fixed a bug with indexed ray payloads in Vulkan. - * New upstream release 450 series. - - Fixed a bug where calls to vkCreateDevice could fail on Ampere GPUs when - ray tracing extensions were enabled and the application was running - within the Steam Linux Runtime. - - Fixed a regression that could cause display corruption when using - a scaled resolution after resuming from power management suspend. [ Luca Boccassi ] * Update nv-readme.ids. @@ -65,9 +63,6 @@ - Added support for the following GPUs: GeForce RTX 3080 Laptop GPU, GeForce RTX 3070 Laptop GPU, GeForce RTX 3060 Laptop GPU, GeForce GT 1010. - * New upstream release 450 series. - - Fixed a bug that could intermittently cause NvFBC applications to fail - with the error message "Unable to send exported fds". [ Andreas Beckmann ] * Update nv-readme.ids. @@ -280,6 +275,24 @@ -- Andreas Beckmann <a...@debian.org> Thu, 24 Sep 2020 21:52:54 +0200 +nvidia-graphics-drivers (450.119.03-1) UNRELEASED; urgency=medium + + * New upstream Tesla release 450.119.03 (2021-04-19). + * Fixed CVE-2021-1076, CVE-2021-1077. + https://nvidia.custhelp.com/app/answers/detail/a_id/5172 + - Fixed a driver installation failure on Linux kernel 5.11 release + candidates, where the NVIDIA kernel module failed to build with error + "error: implicit declaration of function 'sys_close'". + - Fixed a bug where calls to vkCreateDevice could fail on Ampere GPUs when + ray tracing extensions were enabled and the application was running within + the Steam Linux Runtime. + - Fixed a regression that could cause display corruption when using + a scaled resolution after resuming from power management suspend. + - Fixed a bug that could intermittently cause NvFBC applications to fail + with the error message "Unable to send exported fds". + + -- Andreas Beckmann <a...@debian.org> Thu, 22 Apr 2021 21:13:14 +0200 + nvidia-graphics-drivers (450.102.04-1) UNRELEASED; urgency=medium * New upstream long lived branch release 450.102.04 (2021-01-07). @@ -497,7 +510,6 @@ display offload sinks, also known as "Reverse PRIME". See the chapter titled "Offloading Graphics Display with RandR 1.4" in the README for additional information. - - Removed 'libGL.la' libtool archive from the install package. * New upstream release 440 series. - Fixed a bug where a Vulkan application under PRIME render offload would not always be correctly throttled to vsync despite @@ -1022,6 +1034,18 @@ -- Andreas Beckmann <a...@debian.org> Sat, 25 May 2019 13:49:09 +0200 +nvidia-graphics-drivers (418.197.02-1) buster; urgency=medium + + * New upstream Tesla release 418.197.02 (2021-04-19). + * Fixed CVE-2021-1076. (Closes: #987216) + https://nvidia.custhelp.com/app/answers/detail/a_id/5172 + + [ Andreas Beckmann ] + * nvidia-alternative: Add libnvidia-ml.so slave alternative if + libnvidia-ml-dev is installed (460.56-2). (Closes: #984881) + + -- Andreas Beckmann <a...@debian.org> Tue, 20 Apr 2021 15:01:59 +0200 + nvidia-graphics-drivers (418.181.07-1) buster; urgency=medium * New upstream Tesla release 418.181.07 (2021-01-19). @@ -1631,6 +1655,19 @@ -- Andreas Beckmann <a...@debian.org> Sun, 22 Apr 2018 13:59:45 +0200 +nvidia-graphics-drivers (390.143-1) UNRELEASED; urgency=medium + + * New upstream legacy branch release 390.143 (2021-04-19). + * Fixed CVE-2021-1076. + https://nvidia.custhelp.com/app/answers/detail/a_id/5172 + - Fixed a bug where vkCreateSwapchain could cause the X Server to crash + when an invalid imageFormat was provided. + - Fixed a driver installation failure on Linux kernel 5.11 release + candidates, where the NVIDIA kernel module failed to build with error + "fatal error: asm/kmap_types.h: No such file or directory". + + -- Andreas Beckmann <a...@debian.org> Mon, 19 Apr 2021 22:38:56 +0200 + nvidia-graphics-drivers (390.141-1) UNRELEASED; urgency=medium * New upstream legacy branch release 390.141 (2021-01-07). diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/control.md5sum nvidia-graphics-drivers-460.73.01/debian/control.md5sum --- nvidia-graphics-drivers-460.67/debian/control.md5sum 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/control.md5sum 2021-04-23 07:59:01.000000000 +0100 @@ -1,5 +1,5 @@ 914ae3291e6bc00eb144031fa24760e6 debian/control cca8534b0eb0491c30b6b657e127b1d0 debian/control.in db12f898b07cdaf431ad34bd68a1662e debian/gen-control.pl -ad9f17f1238e39b61a4819e1455f329d debian/rules -ad2d99597ef1a57bf22688001c2eb3a7 debian/rules.defs +de7c9eee1eb720f20919408f850af51a debian/rules +65a302e51a0a1b628058be29ad1f384e debian/rules.defs diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/detect/nvidia-tesla-460.ids nvidia-graphics-drivers-460.73.01/debian/detect/nvidia-tesla-460.ids --- nvidia-graphics-drivers-460.67/debian/detect/nvidia-tesla-460.ids 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/detect/nvidia-tesla-460.ids 2021-04-23 07:59:01.000000000 +0100 @@ -210,6 +210,7 @@ 10DE1CFA 10DE1CFB 10DE1D01 +10DE1D02 10DE1D10 10DE1D11 10DE1D12 @@ -262,6 +263,7 @@ 10DE1F08 10DE1F09 10DE1F0A +10DE1F0B 10DE1F10 10DE1F11 10DE1F12 @@ -283,19 +285,26 @@ 10DE1F98 10DE1F99 10DE1F9C +10DE1F9D 10DE1FB0 +10DE1FB1 +10DE1FB2 10DE1FB8 10DE1FB9 10DE1FBB +10DE1FDD 10DE1FF9 10DE20B0 10DE20B1 10DE20B2 +10DE20B6 +10DE20B7 10DE20F1 10DE2182 10DE2184 10DE2187 10DE2188 +10DE2189 10DE2191 10DE2192 10DE21C4 @@ -303,6 +312,17 @@ 10DE2204 10DE2206 10DE2230 +10DE2231 10DE2235 +10DE2236 +10DE2237 10DE2484 10DE2486 +10DE249C +10DE249D +10DE24B0 +10DE24DC +10DE24DD +10DE2503 +10DE2520 +10DE2560 diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/nvidia-detect.install nvidia-graphics-drivers-460.73.01/debian/nvidia-detect.install --- nvidia-graphics-drivers-460.67/debian/nvidia-detect.install 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/nvidia-detect.install 2021-04-23 07:59:01.000000000 +0100 @@ -5,4 +5,5 @@ debian/detect/nvidia-tesla-418.ids usr/share/nvidia/ [amd64 ppc64el] debian/detect/nvidia-tesla-440.ids usr/share/nvidia/ [amd64 ppc64el] debian/detect/nvidia-tesla-450.ids usr/share/nvidia/ [amd64 arm64 ppc64el] +debian/detect/nvidia-tesla-460.ids usr/share/nvidia/ [amd64 arm64 ppc64el] nvidia.ids usr/share/nvidia/ [!ppc64el] diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/nv-readme.ids nvidia-graphics-drivers-460.73.01/debian/nv-readme.ids --- nvidia-graphics-drivers-460.67/debian/nv-readme.ids 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/nv-readme.ids 2021-04-23 07:59:01.000000000 +0100 @@ -287,6 +287,8 @@ 10DE1F9C 10DE1F9D 10DE1FB0 +10DE1FB1 +10DE1FB2 10DE1FB8 10DE1FB9 10DE1FBB @@ -295,6 +297,8 @@ 10DE20B0 10DE20B1 10DE20B2 +10DE20B6 +10DE20B7 10DE20F1 10DE2182 10DE2184 @@ -308,11 +312,15 @@ 10DE2204 10DE2206 10DE2230 +10DE2231 10DE2235 +10DE2236 +10DE2237 10DE2484 10DE2486 10DE249C 10DE249D +10DE24B0 10DE24DC 10DE24DD 10DE2503 diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/rules nvidia-graphics-drivers-460.73.01/debian/rules --- nvidia-graphics-drivers-460.67/debian/rules 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/rules 2021-04-23 07:59:01.000000000 +0100 @@ -166,9 +166,9 @@ sed 's/libGLX_nvidia.so.0/libGL.so.1/' $< > $@ nv-readme.ids: unpack-stamp - sed -e '0,/A. Supported\|APPENDIX A: SUPPORTED/d' \ - -e '0,/Appendix A. Supported\|APPENDIX A: SUPPORTED/d' \ - -e '0,/^Below\|APPENDIX B/{/ 0x/s/.* 0x\([0-9a-fA-F]\{4\}\).*/10de\1/p; /^.\{41\} [0-9a-fA-F]\{4\} /s/^.\{41\} \([0-9a-fA-F]\{4\}\) .*/10de\1/p};d' \ + sed -r -e '0,/A. Supported|APPENDIX A: SUPPORTED/d' \ + -e '0,/Appendix A. Supported|APPENDIX A: SUPPORTED/d' \ + -e '0,/^Below|APPENDIX B/{/ 0x/s/.* 0x([0-9a-fA-F]{4}).*/10de\1/p; /^(.{41}|.{49}) [0-9a-fA-F]{4} /s/^(.{41}|.{49}) ([0-9a-fA-F]{4}) .*/10de\2/p};d' \ NVIDIA-Linux/README.txt \ | tr a-f A-F | sort -u > $@ @set -e -x ; \ diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/rules.defs nvidia-graphics-drivers-460.73.01/debian/rules.defs --- nvidia-graphics-drivers-460.67/debian/rules.defs 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/rules.defs 2021-04-23 07:59:01.000000000 +0100 @@ -2,7 +2,7 @@ #TESLA_MAJOR = #NVIDIA_TESLA = $(TESLA_MAJOR) #NVIDIA_LEGACY = -WATCH_VERSION = +WATCH_VERSION = 460 NVIDIA_SETTINGS = nvidia-settings (>= $(version_major)) NVIDIA_LEGACY_CHECK = nvidia-legacy-check (>= 396) [amd64] diff -Nru --exclude 'NVIDIA*.run' nvidia-graphics-drivers-460.67/debian/watch nvidia-graphics-drivers-460.73.01/debian/watch --- nvidia-graphics-drivers-460.67/debian/watch 2021-03-21 19:51:46.000000000 +0000 +++ nvidia-graphics-drivers-460.73.01/debian/watch 2021-04-23 07:59:01.000000000 +0100 @@ -7,5 +7,5 @@ # https://us.download.nvidia.com/tesla/450.51.05/NVIDIA-Linux-aarch64-450.51.05.run opts=component=amd64 \ -https://download.nvidia.com/XFree86/Linux-x86_64/(\d[\d\.\-]*)/NVIDIA-Linux-x86_64-(\d[\d\.\-]*)\.run -#opts=searchmode=plain https://docs.nvidia.com/datacenter/tesla/index.html Version.(\d[\d\.\-]*) +https://download.nvidia.com/XFree86/Linux-x86_64/(460(?:\.[\d\.\-]+)?)/NVIDIA-Linux-x86_64-(\d[\d\.\-]*)\.run +#opts=searchmode=plain https://docs.nvidia.com/datacenter/tesla/index.html Version.(460(?:\.[\d\.\-]+)?)
signature.asc
Description: This is a digitally signed message part